Hey there,
last week I came across a weird, but working, way of injecting HTML into an iframe through Javascript.
It turns out that with this method the HTTP Referer is not sent.
Here is the code pastie.org (tested on Chrome, not sure about other browsers)
Does someone have any clue on how does it works?
